APT35 is one of several state-backed hacking groups known to have been developing tools to exploit public-facing Java applications that use vulnerable versions of the Log4j error-logging component.

News of the exploit, soon called Log4Shell, quickly spread. Early reports emerged of servers running the game Minecraft being compromised. It quickly became clear, however, that the exploit was ...

Attackers are exploiting a vulnerability in the Log4j logging platform on systems running Apache software that is written in Java and utilizes the log4j library. Critical systems will be impacted.

Also covered will be Log4j lessons learned and the importance of fixing bad code before attacker can exploit it.

Cybersecurity researchers warn that insecure instances of Lo4j are still out there to be exploited - and are easy for attackers to discover.

Active exploits In recent months, there has been evidence that threat actors are gathering around a new malware tool to exploit the Log4j vulnerability.

Unveiling the Dark Side of Cyberworld: The Apache Log4j Crisis. Discover the shocking Log4Shell exploit that shook the internet. Learn vital lessons about cybersecurity and safeguarding our ...

CISA's Log4Shell threat advisory highlights that threat actors are still looking for vulnerable systems to exploit.